Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 27 Dec 2013 01:13:46 +0530
From: Ratul Gupta <>
Subject: CVE Request: rubygem-will_paginate XSS vulnerabilities


Cross-Site Scripting (XSS) vulnerabilities were found in will_paginate 
gem for Ruby, where certain input related to generated pagination links 
were not properly sanitised before being returned. This could be 
exploited to execute arbitrary HTML and script code in a user's browser 
session in context of an affected site.

Can a CVE please be assigned to this issue?


Ratul Gupta / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.